$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136352e302f32342d3234203d3e2039383038.roa File: 35322e38322e3136352e302f32342d3234203d3e2039383038.roa (raw, json) Hash identifier: GzmTVoQDOWQjN49zT40osGZeO/BFsLS2fi2CdKe0nTQ= Subject key identifier: 7C:F4:46:6D:EB:D3:25:B5:BF:CA:91:77:15:C3:52:E7:68:56:22:9E Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 4670CDCD78FEAF0D65D717807BDC2989AEAEE2F5 Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136352e302f32342d3234203d3e2039383038.roa Signing time: Wed 12 Aug 2026 07:45:50 +0000 ROA not before: Wed 12 Aug 2026 07:40:50 +0000 ROA not after: Wed 11 Aug 2027 07:45:50 +0000 asID: 9808 IP address blocks: 52.82.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:70:cd:cd:78:fe:af:0d:65:d7:17:80:7b:dc:29:89:ae:ae:e2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Aug 12 07:40:50 2026 GMT Not After : Aug 11 07:45:50 2027 GMT Subject: CN=7CF4466DEBD325B5BFCA917715C352E76856229E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:bb:29:8d:cf:f6:4d:cc:59:bb:f9:3a:7f: 21:8e:79:69:e8:7d:9f:ac:fc:fa:54:95:42:2f:41: 4e:d6:bf:30:a0:9e:9d:fa:22:9f:92:e6:2b:9f:07: 3a:0f:9f:7c:79:dc:87:4b:29:70:d3:67:32:43:e3: 88:43:bf:92:de:5b:da:50:6b:7b:df:de:80:da:db: 52:fb:07:a6:c8:24:77:e4:37:81:ae:db:68:9f:1c: b4:1c:2e:29:eb:4c:5c:db:bf:4d:95:e0:6c:9e:c3: 4f:f6:31:be:f9:ed:d1:b3:59:eb:d3:c8:39:8c:2b: e9:57:a1:1f:7e:49:cf:79:ca:ff:19:cd:f9:e1:ef: 4e:49:74:b9:86:5e:81:be:2e:ff:9a:e1:26:64:9b: eb:e2:91:dd:a2:61:d0:84:50:89:f8:07:2e:75:1e: bd:9e:e4:60:43:8e:bf:4b:56:b2:c5:a8:a9:9d:61: a6:f6:a1:e4:53:37:8f:4b:93:0e:00:81:07:6e:6b: 39:95:75:07:46:18:37:50:a1:64:00:84:0e:dc:c2: 5c:68:3a:95:7f:7a:e1:f5:82:75:35:23:a5:dd:38: 7b:d9:67:33:c9:92:3d:be:9e:4a:92:2e:e0:a7:7b: 91:e1:aa:ca:19:95:08:cf:f0:44:4b:08:92:b5:e2: 80:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F4:46:6D:EB:D3:25:B5:BF:CA:91:77:15:C3:52:E7:68:56:22:9E X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3136352e302f32342d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.82.165.0/24 Signature Algorithm: sha256WithRSAEncryption 06:06:45:46:c6:f5:95:b3:0e:a0:92:50:7d:05:8d:f0:a1:fb: a4:13:8a:4b:64:a9:5c:6c:d4:1c:03:61:8d:14:81:bf:8f:6b: a1:28:65:4a:4a:4f:6e:95:5e:3f:51:33:6a:2d:87:18:b4:06: 0e:64:0f:8b:8e:b9:21:13:c3:3f:e5:3d:9a:0f:b5:46:97:b0: 0b:a4:50:ad:51:9f:e1:48:a8:79:22:7e:33:40:e9:04:e9:40: a7:04:ea:6b:bb:15:ab:86:e3:b0:e5:8f:f8:af:5b:b3:34:90: d4:51:96:e6:0a:aa:64:10:aa:8a:29:1c:d8:b0:ad:52:f4:5e: 9f:fc:b4:3c:28:8b:4d:24:7c:49:59:84:be:04:c7:4a:35:0e: 4e:55:e9:57:60:81:8d:db:b9:a2:8a:ea:07:7b:d7:e8:db:44: 6b:7d:a6:92:83:d3:4f:cb:54:8f:d5:f5:ff:95:84:8d:5a:1e: 5f:f0:57:d4:f4:17:90:7b:12:86:45:29:82:d3:96:5b:a6:59: fb:ef:b3:b4:a3:5c:6e:f5:dc:eb:66:8f:31:a5:7a:89:cc:35: a7:2b:b4:dd:3b:a3:f2:9a:45:62:fd:70:f0:9c:3c:a1:88:f9: 27:4a:28:a7:b4:e3:88:1e:58:09:3d:39:0f:c8:42:ac:11:a5: a4:ae:f5:3f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIURnDNzXj+rw1l1xeAe9wpia6u4vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjA4MTIwNzQwNTBaFw0yNzA4MTEwNzQ1NTBaMDMxMTAvBgNV BAMTKDdDRjQ0NjZERUJEMzI1QjVCRkNBOTE3NzE1QzM1MkU3Njg1NjIyOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10bspjc/2TcxZu/k6fyGOeWno fZ+s/PpUlUIvQU7WvzCgnp36Ip+S5iufBzoPn3x53IdLKXDTZzJD44hDv5LeW9pQ a3vf3oDa21L7B6bIJHfkN4Gu22ifHLQcLinrTFzbv02V4Gyew0/2Mb757dGzWevT yDmMK+lXoR9+Sc95yv8Zzfnh705JdLmGXoG+Lv+a4SZkm+vikd2iYdCEUIn4By51 Hr2e5GBDjr9LVrLFqKmdYab2oeRTN49Lkw4AgQduazmVdQdGGDdQoWQAhA7cwlxo OpV/euH1gnU1I6XdOHvZZzPJkj2+nkqSLuCne5HhqsoZlQjP8ERLCJK14oC7AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUfPRGbevTJbW/ypF3FcNS52hWIp4wHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzUzMjJlMzgzMjJl MzEzNjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAA0UqUwDQYJKoZIhvcNAQELBQADggEBAAYGRUbG9ZWzDqCSUH0FjfCh+6QTiktk qVxs1BwDYY0Ugb+Pa6EoZUpKT26VXj9RM2othxi0Bg5kD4uOuSETwz/lPZoPtUaX sAukUK1Rn+FIqHkifjNA6QTpQKcE6mu7FauG47Dlj/ivW7M0kNRRluYKqmQQqoop HNiwrVL0Xp/8tDwoi00kfElZhL4Ex0o1Dk5V6VdggY3buaKK6gd71+jbRGt9ppKD 00/LVI/V9f+VhI1aHl/wV9T0F5B7EoZFKYLTllumWfvvs7SjXG713OtmjzGleonM NacrtN07o/KaRWL9cPCcPKGI+SdKKKe044geWAk9OQ/IQqwRpaSu9T8= -----END CERTIFICATE-----Generated at Sat Aug 29 06:46:55 2026 by rpki-client